CVE-2020-17365: High severity hotspot shield vulnerability
Improper directory permissions in the Hotspot Shield VPN client software for Windows 10.3.0 and earlier may allow an authorized user to potentially enable escalation of privilege via local access. The vulnerability allows a local user to corrupt system files: a local user can create a specially crafted symbolic link to a critical file on the system and overwrite it with privileges of the application.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-17365?
CVE-2020-17365 is considered to have a high severity due to its potential to enable privilege escalation for local users.
How do I fix CVE-2020-17365?
To fix CVE-2020-17365, ensure that the Hotspot Shield VPN client is updated to the latest version beyond 10.3.0.
Who is affected by CVE-2020-17365?
CVE-2020-17365 affects users of Hotspot Shield VPN client software for Windows 10.3.0 and earlier versions.
What type of vulnerability is CVE-2020-17365?
CVE-2020-17365 is a privilege escalation vulnerability caused by improper directory permissions in the software.
Can CVE-2020-17365 be exploited remotely?
No, CVE-2020-17365 requires local access for exploitation by an authorized user.